/testing/guestbin/swan-prep west # ipsec start Redirecting to: [initsystem] west # /testing/pluto/bin/wait-until-pluto-started west # ipsec whack --impair revival west # ipsec auto --add westnet-eastnet 002 added connection description "westnet-eastnet" west # echo "initdone" initdone west # # create a partial state on east, don't hold the hack for retransmit west # ipsec whack --impair impair-drop-i2 --impair delete-on-retransmit west # ipsec auto --up westnet-eastnet 002 "westnet-eastnet" #1: initiating Main Mode 1v1 "westnet-eastnet" #1: STATE_MAIN_I1: initiate 002 "westnet-eastnet" #1: IMPAIR: retransmit so deleting SA 002 "westnet-eastnet" #1: deleting state (STATE_MAIN_I1) and NOT sending notification 002 "westnet-eastnet" #1: IMPAIR: skipping revival of connection 'westnet-eastnet' that is supposed to remain up west # # we are waiting for east to expire the partial IKE state in 1+1+2+4+8+16+32 secs west # sleep 30 west # sleep 30 west # sleep 10 west # echo done done west # # on east, we should see no more partial state west # ipsec status | grep STATE_ whack: is Pluto running? connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused) west # west # ../bin/check-for-core.sh west # if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi